|
ISPConfig安装方法 详细介绍了Debian Sarege(Debian 3.1)安装ISPConfig需要的所有服务，包括 web服务器（可支持SSL），邮件服务器（SMTP-AUTH和TLS），域名服务器，FTP服务器，MySQL服务器,POP3/IMAP,以及磁盘限额，防火墙等 作者:Johnny 更新日期:2005-11-14
2.不要设置硬件时钟为GMT 3.继续安装libc-client不要Maildir支持（我们以后可选择安装 Courier-POP3/Courier-IMAP,所以不必担心) 4.不要配置exmi,因为我们要安装postfix
# /etc/network/interfaces -- configuration file for ifup(8), ifdown(8)# The loopback interfaceauto loiface lo inet loopback# The first network card - this entry was created during the Debian installation# (network, broadcast and gateway are optional)auto eth0iface eth0 inet static address 192.168.0.100 netmask 255.255.255.0 network 192.168.0.0 broadcast 192.168.0.255 gateway 192.168.0.1auto eth0:0iface eth0:0 inet static address 192.168.0.101 netmask 255.255.255.0 network 192.168.0.0 broadcast 192.168.0.255 gateway 192.168.0.1
/etc/init.d/networking restart增加域名服务器 search servernameserver 145.253.2.75nameserver 193.174.32.18nameserver 194.25.0.60 127.0.0.1 localhost.localdomain localhost server1192.168.0.100 server1.example.com server1192.168.0.101 virtual-ip1.example.com virtual-ip1# The following lines are desirable for IPv6 capable hosts::1 ip6-localhost ip6-loopbackfe00::0 ip6-localnetff00::0 ip6-mcastprefixff02::1 ip6-allnodesff02::2 ip6-allroutersff02::3 ip6-allhosts设置主机名 echo server1.example.com > /etc/hostname/bin/hostname -F /etc/hostname安装／删除一些软件 apt-get install wget bzip2 rdate fetchmail libdb3++-dev unzip zip ncftp xlispstat libarchive-zip-perl zlib1g-dev libpopt-dev nmap openssl lynx fileutils(注意：上面的命令写在一行里) 再移除一些用不着的 apt-get remove lpr nfs-common portmap pidentd pcmcia-cs pppoe pppoeconf ppp pppconfigupdate-rc.d -f exim removeupdate-inetd --remove daytimeupdate-inetd --remove telnetupdate-inetd --remove timeupdate-inetd --remove fingerupdate-inetd --remove talkupdate-inetd --remove ntalkupdate-inetd --remove ftpupdate-inetd --remove discard移除软件时需要配置，回答YES 重新加载inetd服务 /etc/init.d/inetd reload磁盘限额 apt-get install quota quotatool 像下面这样编辑/etc/fstab ，我增加了userquota,grpquot给root分区 # /etc/fstab: static file system information. # # <file system> <mount point> <type> <options> <dump> <pass> proc /proc proc defaults 0 0 /dev/sda1 / ext3 defaults,errors=remount-ro,usrquota,grpquota 0 1 /dev/sda5 none swap sw 0 0 /dev/hdc /media/cdrom0 iso9660 ro,user,noauto 0 0 /dev/fd0 /media/floppy0 auto rw,user,noauto 0 0 touch /quota.user /quota.group chmod 600 /quota.* mount -o remount / quotacheck -avugm quotaon -avug
DNS服务器 apt-get install bind9为安全方面的考虑， 以chroot方式运行BIND： 首先停止服务 /etc/init.d/bind9 stop编辑/etc/default/bind9,让bind以非特权用户‘bind’来运行，chroot到/var/lib/named. 也就是将 OPTS="-u bind" 这一行改成 OPTIONS="-u bind -t /var/lib/named"在 /var/lib建立必要的目录 mkdir -p /var/lib/named/etcmkdir /var/lib/named/devmkdir -p /var/lib/named/var/cache/bindmkdir -p /var/lib/named/var/run/bind/run将配置文件从/etc移动到 /var/lib/named/etc: mv /etc/bind /var/lib/named/etc为了避免当未来bind升级时的一些问题，我们在旧的位置，建立一个到新位置的符号连接 ln -s /var/lib/named/etc/bind /etc/bind mknod /var/lib/named/dev/null c 1 3mknod /var/lib/named/dev/random c 1 8chmod 666 /var/lib/named/dev/null /var/lib/named/dev/randomchown -R bind:bind /var/lib/named/var/*chown -R bind:bind /var/lib/named/etc/bind SYSLOGD=""成 SYSLOGD="-a /var/lib/named/dev/log"也就是改成 #! /bin/sh# /etc/init.d/sysklogd: start the system log daemon.PATH=/bin:/usr/bin:/sbin:/usr/sbinpidfile=/var/run/syslogd.pidbinpath=/sbin/syslogdtest -x $binpath || exit 0# Options for start/restart the daemons# For remote UDP logging use SYSLOGD="-r"#SYSLOGD="-a /var/lib/named/dev/log"create_xconsole(){ if [ ! -e /dev/xconsole ]; then mknod -m 640 /dev/xconsole p else chmod 0640 /dev/xconsole fi chown root:adm /dev/xconsole}running(){ # No pidfile, probably no daemon present # if [ ! -f $pidfile ] then return 1 fi pid=`cat $pidfile` # No pid, probably no daemon present # if [ -z "$pid" ] then return 1 fi if [ ! -d /proc/$pid ] then return 1 fi cmd=`cat /proc/$pid/cmdline | tr "\000" "\n"|head -n 1` # No syslogd? # if [ "$cmd" != "$binpath" ] then return 1 fi return 0}case "$1" in start) echo -n "Starting system log daemon: syslogd" create_xconsole start-stop-daemon --start --quiet --exec $binpath -- $SYSLOGD echo "." ;; stop) echo -n "Stopping system log daemon: syslogd" start-stop-daemon --stop --quiet --exec $binpath --pidfile $pidfile echo "." ;; reload|force-reload) echo -n "Reloading system log daemon: syslogd" start-stop-daemon --stop --quiet --signal 1 --exec $binpath --pidfile $pidfile echo "." ;; restart) echo -n "Restarting system log daemon: syslogd" start-stop-daemon --stop --quiet --exec $binpath --pidfile $pidfile sleep 1 start-stop-daemon --start --quiet --exec $binpath -- $SYSLOGD echo "." ;; reload-or-restart) if running then echo -n "Reloading system log daemon: syslogd" start-stop-daemon --stop --quiet --signal 1 --exec $binpath --pidfile $pidfile else echo -n "Restarting system log daemon: syslogd" start-stop-daemon --start --quiet --exec $binpath -- $SYSLOGD fi echo "." ;; *) echo "Usage: /etc/init.d/sysklogd {start|stop|reload|restart|force-reload|reload-or-restart}" exit 1esacexit 0重启日志服务 /etc/init.d/sysklogd restart启动bind,如果有什么错误，可以查看 /var/log/syslog /etc/init.d/bind9 startMySQL apt-get install mysql-server mysql-client libmysqlclient12-dev修改管理员密码 mysqladmin -u root password yourrootsqlpassword当你运行netstat -tap,你应该看到类似于下面的一行 tcp 0 0 localhost.localdo:mysql *:* LISTEN 2449/mysqld # skip-networking /etc/init.d/mysql restartPostfix/POP3/IMAP apt-get install postfix postfix-tls libsasl2 sasl2-bin libsasl2-modules ipopd-ssl uw-imapd-ssl (在一行命令里输入) 配置回答 <- pop3 and pop3s <- No
<- NONE
<- server1.example.com, localhost.example.com, localhost <- No
# See /usr/share/postfix/main.cf.dist for a commented, more complete version smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)biff = no # appending .domain is the MUA's job.append_dot_mydomain = no # Uncomment the next line to generate "delayed mail" warnings#delay_warning_time = 4h myhostname = server1.example.comalias_maps = hash:/etc/aliasesalias_database = hash:/etc/aliasesmyorigin = /etc/mailnamemydestination = server1.example.com, localhost.example.com, localhostrelayhost =mynetworks = 127.0.0.0/8mailbox_command = procmail -a "$EXTENSION"mailbox_size_limit = 0recipient_delimiter = +inet_interfaces = allsmtpd_sasl_local_domain = $myhostnamesmtpd_sasl_auth_enable = yessmtpd_sasl_security_options = noanonymousbroken_sasl_auth_clients = yessmtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destinationsmtpd_tls_auth_only = nosmtp_use_tls = yessmtpd_use_tls = yessmtp_tls_note_starttls_offer = yessmtpd_tls_key_file = /etc/postfix/ssl/smtpd.keysmtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crtsmtpd_tls_CAfile = /etc/postfix/ssl/cacert.pemsmtpd_tls_loglevel = 1smtpd_tls_received_header = yessmtpd_tls_session_cache_timeout = 3600stls_random_source = dev:/dev/urandom重启postfix /etc/init.d/postfix restart 授权将由saslauthd处理. 我们必须改变一些东西来让它正确地工作.因为 Postfix chroot到 /var/spool/postfix 目录 运行，我们必须这样作: mkdir -p /var/spool/postfix/var/run/saslauthd rm -fr /var/run/saslauthd # This needs to be uncommented before saslauthd will be run automaticallySTART=yesPARAMS="-m /var/spool/postfix/var/run/saslauthd"# You must specify the authentication mechanisms you wish to use.# This defaults to "pam" for PAM support, but may also include# "shadow" or "sasldb", like this:# MECHANISMS="pam shadow"MECHANISMS="pam" dir=`dpkg-statoverride --list $PWDIR` #dir=`dpkg-statoverride --list $PWDIR` PWDIR="/var/spool/postfix/var/run/${NAME}" PIDFILE="${PWDIR}/saslauthd.pid" dir="root sasl 755 ${PWDIR}" #!/bin/sh -e NAME=saslauthdDAEMON="/usr/sbin/${NAME}"DESC="SASL Authentication Daemon"DEFAULTS=/etc/default/saslauthdPWDIR="/var/spool/postfix/var/run/${NAME}"PIDFILE="${PWDIR}/saslauthd.pid"dir="root sasl 755 ${PWDIR}" createdir() {# $1 = user# $2 = group# $3 = permissions (octal)# $4 = path to directory [ -d "$4" ] || mkdir -p "$4" chown -c -h "$1:$2" "$4" chmod -c "$3" "$4"}test -f "${DAEMON}" || exit 0# Source defaults file; edit that file to configure this script.if [ -e "${DEFAULTS}" ]; then . "${DEFAULTS}"fi# If we're not to start the daemon, simply exitif [ "${START}" != "yes" ]; then exit 0fi# If we have no mechanisms definedif [ "x${MECHANISMS}" = "x" ]; then echo "You need to configure ${DEFAULTS} with mechanisms to be used" exit 0fi# Add our mechanimsms with the necessary flagPARAMS="${PARAMS} -a ${MECHANISMS}"START="--start --quiet --pidfile ${PIDFILE} --startas ${DAEMON} --name ${NAME} -- ${PARAMS}"# Consider our optionscase "${1}" in start) echo -n "Starting ${DESC}: " #dir=`dpkg-statoverride --list $PWDIR` test -z "$dir" || createdir $dir if start-stop-daemon ${START} >/dev/null 2>&1 ; then echo "${NAME}." else if start-stop-daemon --test ${START} >/dev/null 2>&1; then echo "(failed)." exit 1 else echo "${DAEMON} already running." exit 0 fi fi ;; stop) echo -n "Stopping ${DESC}: " if start-stop-daemon --stop --quiet --pidfile "${PIDFILE}" \ --startas ${DAEMON} --retry 10 --name ${NAME} \ >/dev/null 2>&1 ; then echo "${NAME}." else if start-stop-daemon --test ${START} >/dev/null 2>&1; then echo "(not running)." exit 0 else echo "(failed)." exit 1 fi fi ;; restart|force-reload) $0 stop exec $0 start ;; *) echo "Usage: /etc/init.d/${NAME} {start|stop|restart|force-reload}" >&2 exit 1 ;;esacexit 0重新启动saslauthd /etc/init.d/saslauthd start telnet localhost 25 ehlo localhos 250-STARTTLS 250-AUTH 键入 quit
Courier-IMAP/Courier-POP3 apt-get install courier-imap courier-imap-ssl courier-pop courier-pop-ssl ipopd 和 UW-IMAP 将被替换 然后，配置Postfix 传递Email给用户的 Maildir*: postconf -e 'home_mailbox = Maildir/' postconf -e 'mailbox_command =' /etc/init.d/postfix restart
Apache apt-get install apache2 apache2-docapt-get install libapache2-mod-php4 libapache2-mod-perl2 php4 php4-cli php4-common php4-curl php4-dev php4-domxml php4-gd php4-imap php4-ldap php4-mcal php4-mhash php4-mysql php4-odbc php4-pear php4-xslt curl libwww-perl imagemagick (写在一行命令里，因为这些是有依赖关系的)编辑/etc/apache2/apache2.conf,将 DirectoryIndex index.html index.cgi index.pl index.php index.xhtml改成 DirectoryIndex index.html index.htm index.shtml index.cgi index.php index.php3 index.pl index.xhtml编辑/etc/mime.types 注释掉下面这些行: #application/x-httpd-php phtml pht php#application/x-httpd-php-source phps#application/x-httpd-php3 php3#application/x-httpd-php3-preprocessed php3p#application/x-httpd-php4 php4 <IfModule mod_php4.c># AddType application/x-httpd-php .php .phtml .php3# AddType application/x-httpd-php-source .phps</IfModule> Listen 80Listen 443 cd /etc/apache2/mods-enabledln -s /etc/apache2/mods-available/ssl.conf ssl.confln -s /etc/apache2/mods-available/ssl.load ssl.loadln -s /etc/apache2/mods-available/rewrite.load rewrite.loadln -s /etc/apache2/mods-available/suexec.load suexec.loadln -s /etc/apache2/mods-available/include.load include.load重启Apache: /etc/init.d/apache2 restart
apt-get install proftpd配置时，选择 standalone
DefaultRoot ~IdentLookups offServerIdent on "FTP Server ready."就是屏蔽掉版本信息和限制用户在自己的目录 重启proftpd /etc/init.d/proftpd restartWebalizer apt-get install webalizer配置时回答 <- /var/www/webalizer<- Usage Statistics for<- /var/log/apache/access.log.1同步系统时钟 # update time with ntp server 0 3,9,15,21 * * * /usr/sbin/rdate 128.2.136.71 | logger -t NTP chmod 600 /var/spool/cron/crontabs/root /etc/init.d/cron restart 以root登录，运行下面的命令开始Perl Shell: perl -MCPAN -e shell 请注意: 如果在你的系统中运行有防火墙，请先关掉它。这样可让Perl Shell比较快地取得必要的模块。完成之后再打开防火墙 用Perl Shell较之其他两种方法的最大好处，就是安装新模块时候，能够很好地处理依赖关系：也就是说，当你安装一个模块时，如果需要预先安装什么模块，她会自动提示你安装，你必须回答YES 运行下面的命令安装 SpamAssassin所需要的模块: install HTML::Parser install DB_File install Net::DNS (当提示你是否要测试时，请选择no，这个过程太长了，不值得) q (退出perl shell) HTML::Parser is up to date. /usr/bin/make install -- OK
获取详细信息
附录:关于SuExec -D AP_DOC_ROOT="/var/www"-D AP_GID_MIN=100-D AP_HTTPD_USER="www-data"-D AP_LOG_EXEC="/var/log/apache2/suexec.log"-D AP_SAFE_PATH="/usr/local/bin:/usr/bin:/bin"-D AP_UID_MIN=100-D AP_USERDIR_SUFFIX="public_html"为了在安装时选择/var/www 作为 站点的home目录，当问你选择什么安装模式时，请选择专家模式 Please select the installation mode.In expert mode1)standard2)expertYour Choice:2
开始安装ISPConfig 可能导致named.conf和postfix中一些条目丢失.重要:ISPConfig只适合全新安装，如果你的站点已经有很多站点，而想换一个控制面板的话，是不行的 以root登录，解压缩ISPConfig tar xvfz ISPConfig*.tar.gz进入install_ispconfig: cd install_ispconfig在这个目录里，请检查dist.txt文件，看看有关于你自己的Linux发行版的一些值是否正确 （dist.txt的值是 和 没有修改过的标准版本的值一致的.如果你要改动其中的一些值，请保持dist.txt 的文件格式不变。如果是从上面一直安装下来，不需要修改的）
./setup 安装程序现在开始编译一个支持PHP5的Apache，它将运行在81端口。这个Apache是ISPConfig需要的，它不会影响到已经安装好的apche2
当ISPConfig Apache建立好之后, 一个定制的SSL 认证文件也建立了. 所以你会被问几个问题，你可以接受默认的值，或者填入新的值，这都是可以的。
安装过程的错误处理 编译成功之后，需要进行胚子 选择ISPConfig界面的默认语言 然后你必须接受BSD的license 选择安装模式：standard / expert 标准模式，就是发行版默认的标准设置（没有改变程序的安装路径） 专家模式，改变了配置文件的位置或者Log的位置 除非你因为要运行suEXEc的CGI，你还是使用标准模式为好 如果你安装失败了，在解决好失败的问题之后，请重新解压缩ISPConfig后安装 你可能需要回答的问题 Please enter your MySQL server: E.G. localhost
|
 |
给我留言 | |